Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/lz2XFsbTyhjL-6HdoW0XZokscfM.roa
File: lz2XFsbTyhjL-6HdoW0XZokscfM.roa (raw, json)
Hash identifier: JA7pO8IFT2XMWEJLlp1VFY2ICGA2mynqnj8+zJTBS4U=
Subject key identifier: 97:3D:97:16:C6:D3:CA:18:CB:FB:A1:DD:A1:6D:17:66:89:2C:71:F3
Certificate issuer: /CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Certificate serial: 018AF6DF9B52DC707DE38102D53084356093
Authority key identifier: 3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/lz2XFsbTyhjL-6HdoW0XZokscfM.roa
Signing time: Tue 03 Oct 2023 18:49:23 +0000
ROA not before: Tue 03 Oct 2023 18:49:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 93.119.184.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f6:df:9b:52:dc:70:7d:e3:81:02:d5:30:84:35:60:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Validity
Not Before: Oct 3 18:49:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=973d9716c6d3ca18cbfba1dda16d1766892c71f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:32:4e:68:14:0e:5a:a3:c9:12:c1:85:de:
64:36:c2:da:52:12:38:5c:3f:f0:8c:3a:db:7b:fc:
ce:bf:f3:71:a4:22:74:45:85:a2:f1:e7:c5:a2:cc:
d1:e9:9e:35:07:3d:f4:42:ae:7a:38:33:fa:f5:5a:
65:b5:e4:33:46:61:f4:15:45:7d:52:83:a3:62:0c:
93:81:08:a8:70:0f:b4:8c:79:13:08:b9:3a:24:36:
be:fe:ef:58:5b:07:6f:73:04:05:90:4e:7d:86:c6:
ac:53:1a:65:08:bf:1f:22:52:ee:da:5b:fe:99:34:
2b:cf:4e:3f:92:89:f9:08:b8:93:6a:f0:72:93:52:
49:bc:f4:00:82:99:4c:fe:47:db:b2:24:66:d4:fd:
dd:bd:a1:e5:55:4c:25:78:2e:ff:fb:43:f3:3c:e7:
05:6f:c1:1b:32:74:d9:32:ca:8f:5d:71:82:60:8f:
8a:18:4b:f3:87:f6:73:fc:7c:4d:de:e9:b0:0f:b6:
e5:58:90:b7:79:83:93:6f:7d:1b:3c:bc:83:23:3a:
16:37:e3:a0:77:f3:be:04:f8:d2:41:7f:4c:5e:b5:
60:5c:a6:5f:2d:d5:3a:58:a7:ba:f9:d3:30:f4:20:
93:03:7d:1c:9a:91:d4:25:96:73:ea:23:5e:90:32:
79:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3D:97:16:C6:D3:CA:18:CB:FB:A1:DD:A1:6D:17:66:89:2C:71:F3
X509v3 Authority Key Identifier:
keyid:3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/lz2XFsbTyhjL-6HdoW0XZokscfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.184.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:6a:c4:df:98:e4:f7:bc:ae:55:28:ba:77:03:df:04:b3:c3:
e5:dc:66:a4:ad:95:c6:46:e7:17:c5:cf:dd:31:29:bf:6c:16:
b1:cc:c4:50:03:a4:0d:d8:68:29:44:f6:89:e3:4d:d7:aa:5c:
bb:5d:77:da:18:29:d4:88:81:ef:61:28:05:10:cb:66:67:0f:
cc:8d:58:e0:6d:42:96:e5:54:79:21:6d:d4:d0:a0:c0:e0:37:
f0:cf:02:b2:ec:c4:d4:68:4d:5d:07:3e:01:ae:c6:e4:43:45:
4e:0e:6a:ac:9a:ac:ab:b0:26:cf:28:be:5c:72:91:16:88:30:
23:2b:f9:ae:ff:f4:70:e4:1c:65:22:62:98:0d:c1:86:fb:c6:
c3:df:c6:53:ac:95:5c:79:5e:18:8a:bc:cc:b9:d8:bd:c5:8a:
06:67:c5:ba:67:6e:92:25:e2:05:87:85:a7:72:4d:40:ee:4b:
04:f0:93:3f:bb:56:c0:37:4e:bf:d8:bc:95:37:52:14:ed:f6:
7b:c8:6e:e7:58:b2:6f:e7:a3:40:e7:d7:1f:3d:60:b2:bb:07:
7d:93:59:e4:5d:28:07:c7:1a:35:5f:c8:e3:7a:79:4b:77:e8:
4e:fd:a1:c1:36:d6:0c:55:17:ec:7c:04:a8:de:01:12:63:f2:
92:88:9d:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYr235tS3HB944EC1TCENWCTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMWYzMmQwY2ZhN2E4NmQzMGU3ZTExYTczZWJiZDBiMjRk
YmY0MWYwHhcNMjMxMDAzMTg0OTIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzNkOTcxNmM2ZDNjYTE4Y2JmYmExZGRhMTZkMTc2Njg5MmM3MWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwEyTmgUDlqjyRLBhd5kNsLaUhI4
XD/wjDrbe/zOv/NxpCJ0RYWi8efFoszR6Z41Bz30Qq56ODP69VplteQzRmH0FUV9
UoOjYgyTgQiocA+0jHkTCLk6JDa+/u9YWwdvcwQFkE59hsasUxplCL8fIlLu2lv+
mTQrz04/kon5CLiTavByk1JJvPQAgplM/kfbsiRm1P3dvaHlVUwleC7/+0PzPOcF
b8EbMnTZMsqPXXGCYI+KGEvzh/Zz/HxN3umwD7blWJC3eYOTb30bPLyDIzoWN+Og
d/O+BPjSQX9MXrVgXKZfLdU6WKe6+dMw9CCTA30cmpHUJZZz6iNekDJ5gQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJc9lxbG08oYy/uh3aFtF2aJLHHzMB8GA1UdIwQY
MBaAFD4fMtDPp6htMOfhGnPrvQsk2/QfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGg4eTBNLW5xRzB3NS1FYWMtdTlDeVRiOUI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81ZjA0OGItMmRmMy00MTQwLTlmNGUt
NjA2OGMwNGQxYmUwLzEvbHoyWEZzYlR5aGpMLTZIZG9XMFhab2tzY2ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS81ZjA0OGItMmRmMy00MTQwLTlmNGUtNjA2OGMwNGQxYmUw
LzEvUGg4eTBNLW5xRzB3NS1FYWMtdTlDeVRiOUI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXXe4MA0G
CSqGSIb3DQEBCwUAA4IBAQCjasTfmOT3vK5VKLp3A98Es8Pl3GakrZXGRucXxc/d
MSm/bBaxzMRQA6QN2GgpRPaJ403Xqly7XXfaGCnUiIHvYSgFEMtmZw/MjVjgbUKW
5VR5IW3U0KDA4DfwzwKy7MTUaE1dBz4BrsbkQ0VODmqsmqyrsCbPKL5ccpEWiDAj
K/mu//Rw5BxlImKYDcGG+8bD38ZTrJVceV4YirzMudi9xYoGZ8W6Z26SJeIFh4Wn
ck1A7ksE8JM/u1bAN06/2LyVN1IU7fZ7yG7nWLJv56NA59cfPWCyuwd9k1nkXSgH
xxo1X8jjenlLd+hO/aHBNtYMVRfsfASo3gESY/KSiJ1E
-----END CERTIFICATE-----
Generated at Fri Nov 17 13:49:49 2023 by rpki-client on console-ams.rpki-client.org